Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5799E92EF81C11EFA80109B4762E951A.roa
File: 5799E92EF81C11EFA80109B4762E951A.roa (raw, json)
Hash identifier: UqT8uMgpT+UrPIt2e9EW/I+vzNQ7NHtuObGQqztOcgU=
Subject key identifier: 5C:A2:49:E7:B0:3A:5E:8F:98:47:E6:1E:F9:B6:C4:BA:F3:9F:90:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017033
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5799E92EF81C11EFA80109B4762E951A.roa
Signing time: Mon 03 Mar 2025 10:43:28 +0000
ROA not before: Mon 03 Mar 2025 10:43:25 +0000
ROA not after: Mon 31 Mar 2025 10:43:25 +0000
asID: 202656
IP address blocks: 154.219.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94259 (0x17033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 10:43:25 2025 GMT
Not After : Mar 31 10:43:25 2025 GMT
Subject: CN=67c587d0-3058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:91:bf:4d:08:ff:20:6e:4a:3b:a6:e3:d5:
d5:94:a7:b3:e5:70:e7:df:b7:3d:79:8f:4d:68:87:
85:95:ea:2f:43:43:ae:a7:68:d6:c4:d6:46:6f:64:
e2:cd:f6:e5:90:b6:8e:f4:87:c5:1f:7d:04:ea:cc:
57:5c:b8:8a:82:94:31:a5:13:4c:7c:56:fd:57:5c:
a2:08:68:c5:2f:02:44:29:2a:42:78:37:dc:52:97:
78:a3:83:6b:69:be:c7:fb:99:cf:88:b8:98:df:c3:
cb:16:42:3c:e1:cd:82:55:8d:93:f3:b8:47:4f:4d:
61:82:b1:78:82:ba:27:bb:67:af:5b:5d:26:b7:98:
fc:47:15:89:d4:98:ff:05:c3:08:76:48:78:68:7c:
c0:5b:ca:f4:f1:98:98:3e:5a:82:d2:a9:3c:09:9a:
ae:2b:eb:1d:8d:f8:f7:14:14:f6:a2:72:42:10:69:
bb:c1:0e:0e:dd:b5:21:26:e3:ba:3c:4d:0d:8c:99:
4c:94:12:06:f6:a0:4b:72:02:47:39:78:4b:14:82:
0b:33:4d:a3:ce:2e:83:1f:05:e0:b9:77:6d:e3:89:
f8:05:e4:ef:d0:2c:9c:5d:89:e5:45:f8:9c:f4:f4:
7f:5d:3c:81:09:27:3e:57:1f:74:57:d6:42:ac:f6:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A2:49:E7:B0:3A:5E:8F:98:47:E6:1E:F9:B6:C4:BA:F3:9F:90:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5799E92EF81C11EFA80109B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.26.0/24
Signature Algorithm: sha256WithRSAEncryption
25:0c:61:fa:da:46:9d:ee:09:e5:2a:9d:f6:a2:ef:e3:b5:ee:
d0:0b:70:ee:61:6e:b5:31:45:64:85:86:f7:e3:f6:9b:b0:a4:
eb:73:0e:b6:c9:ea:90:88:76:18:22:83:66:e0:92:20:42:6f:
a8:e9:b3:25:ac:a1:0e:f8:5e:42:39:56:c8:7e:4d:6a:8b:3f:
9b:3a:1e:62:fc:f6:35:20:f2:af:95:10:c2:44:48:fa:09:d3:
d9:e0:bb:c8:50:36:98:72:9b:47:cd:92:6b:00:eb:99:41:df:
eb:9b:d7:f2:be:a6:46:f6:8e:67:1d:27:b0:d8:f3:2f:fb:7e:
f9:75:c1:6e:ae:fb:75:a5:fb:48:c0:28:a8:a2:cb:50:7d:03:
14:0a:41:13:e3:3d:88:60:1c:b1:bd:ff:38:c3:5e:81:26:cc:
4e:8c:e9:f8:fd:7b:5e:8f:a0:90:85:70:89:bb:49:30:0f:92:
53:85:b6:dc:b1:67:0c:f7:2b:de:ba:a0:59:ba:d5:72:14:14:
26:37:e5:05:5d:a1:ae:0b:b4:12:44:bd:f4:ee:0d:83:a5:c2:
00:7f:61:de:c9:da:b4:6f:d7:e7:4e:89:f3:ea:60:d8:42:ff:
64:e1:f0:98:c8:26:81:8a:86:23:fd:2b:36:b6:23:16:28:66:
e6:4d:b1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:05:14 2025 by rpki-client